Talk:Spam blacklist

From Meta, a Wikimedia project coordination wiki
This is an archived version of this page, as edited by Sj (talk | contribs) at 01:56, 14 July 2005. It may differ significantly from the current version.
Projects

This file is for use by, e.g., the Mediawiki SpamBlacklist extension

This list is high overhead and only for hard cases which can't be dealt with using routine blocking methods. If IP blocks don't work and the spam is regular or in lots of wikis, it's a good candidate for listing here.

Is it really such high overhead? After an IRC discussion with Tim Starling and others, this is unclear. +sj+

If you haven't tried blocking and found it to be ineffective, it's not worth the great amount of time involved in verifying and adding a new entry, then dealing with any accidental blockings related to the listing. Administrators here will use their discretion in adding and removing entries by the guidelines laid out on this page.

If you are having problems with the spam list and aren't a spammer please include a link to the article you are having trouble saving and say which URL (without the leading http part) you are told is blocked. Any meta administrator can edit the spam blacklist.

For removals because they conflict with a known significant spammer, please include them in the whitelisting desired section so they can be specifically whitelisted later, while still keeping the generic block in place.

Requests for removal

Add new items to the end of this section. For each one, include:

  • The URL the error message mentions without the http:// prefix.
  • Links to the article or articles you were editing. Use a full URL if you're not sure how to write an interwiki link.
  • See /completed removals for removals which have been processed (either removed or reasons given for choosing not to remove). If not removed, you can still use a plain text form of the link.
  • Many of these should probably go into the whitelisting desired section - if it's just a single URL, that's probably where they belong.

joyce.msk.ru

joyce.msk.ru is being blocked because it matches msk.ru. Used in ru:Джойс, Джеймс (James Joyce). Ornil 03:15, 19 Jun 2005 (UTC) (admin on ru:)

ac2i.homelinux.com

Matches on "homelinux\.com" because of spam from "soma.home---xxx---linux.com/*". But other pages on homelinux are no spam i.e. ac2i.homelinux.com/. The block should be changed to "soma\.homelinux\.com"

fansite-of-angel.serveftp.com

This is a BBS about chinese dubbing artists and surely not a spam. Some articles in chinese wikipedia containing this address cannot be edit, e.g. zh:雷碧文. --zh:User:Netsonfong

Requests for addition

Add new items to the end of the list. See /completed additions for additions which have been processed (either added or reasons given for choosing not to add).

If you do not provide enough information, nothing will happen.

For each request, please include:

  • Links to one or more page diffs which show the spam being added. Preferably in many different wikis. Admins can check for cross-wiki spam ads using a special page.
  • Include the URLs being promoted - they won't be added without a link to them. We need to document why we added something.
  • Do not include anything where you can't point to a diff showing the spam being added - we also have to ensure that false requests aren't made for addition or deletion.
  • Do not include http://, even inside nowiki tags, otherwise we will run into the spam filter while moving your entry if it is added.

Show restraint in requesting additions for:

  • Spammers who spam once.
  • Spammers who target only one article.
  • Spammers who can be effectively blocked with IP blocks - use those instead.

Persistent spamming from mycompiere.com

This guy keeps adding his spam link in en:Compiere for nearly three weeks now, he is persistent and very active and also removes useful links to put in his own. He has been first warned, then blocked, but he has changed is IP or gets through using a proxy. He is also spamming de:Compiere, es:Compiere, fr:Compiere, id:Compiere, is:Compiere, although the link is in English. He seems to think that by beeing so persistent people will get tired from removing his links. Thanks. --Khalid hassani 14:23, 16 Jun 2005 (UTC)

Added, thank you. silsor 15:07, Jun 16, 2005 (UTC)
wow great ! thank you for your diligence Khalid hassani --81.192.230.152 18:34, 16 Jun 2005 (UTC)

massive Linkspamming in german WP

At least following entries were created by a link spammer:

It contained following domains:

  • www.ebusiness-cards.org
  • www.globalflights.org
  • www.voip-guide.org voip
  • www.secure-network.info
  • www.globalflights.org
  • www.ecar-rentals.com
  • www.ebackground-checks.com
  • www.secure-network.info
  • www.cruise-guide.org
  • www.wedding-knot.com
  • www.predictive-dialers.org

--Gunter.krebs 12:53, 30 May 2005 (UTC)[reply]

Thank you, added. silsor 14:35, May 30, 2005 (UTC)

Please add the following: [1], it was posted on the Icelandic Wikipedia. —Ævar Arnfjörð Bjarmason 20:29, 27 Apr 2005 (UTC)

Any more examples? Did it happen on more than one page? More than one IP? silsor 14:15, May 17, 2005 (UTC)

www.spkpfh.de

Spams repeatedly, dozens of times and for months now on my talk page, under various IPs (example: http://de.wikipedia.org/w/index.php?title=Benutzer_Diskussion:AndreasPraefcke&diff=5906358&oldid=5905217, history: http://de.wikipedia.org/w/index.php?title=Benutzer_Diskussion:AndreasPraefcke&action=history - look for "some comments"), also on my talk pages on en: (http://en.wikipedia.org/w/index.php?title=User_talk:AndreasPraefcke&action=history) and commons: (http://commons.wikimedia.org/w/index.php?title=User_talk:AndreasPraefcke&action=history), blocked in the meantime because of the spkpfh spams, the commons talk page showing no signs of it by now since the history has been cleared of the spammed versions. In the meantime they have also found my User talk:AndreasPraefcke on meta... I would like to have at least one working talk page without these abusive rants appearing daily (and often even a couple of times a day). --AndreasPraefcke 14:22, 19 May 2005 (UTC)[reply]

Reviewed and blocked, despite the political connotations. Be aware that this may not stop the spam. silsor 15:06, May 19, 2005 (UTC)
As I suspected our spammer has just changed the format of the links, so I'll take the domain off the blacklist. This behaviour is still inexcusable but you'll have to go elsewhere to take care of it, I'm afraid. silsor 18:24, May 21, 2005 (UTC)
Thanks. I wasn't sure how the block list works (I couldn't find any explanation), so I thought it might help. Alas, it was worth a try. By the way, could you block my user page and talk page on meta? It's really enough for me to have to take care of my German one (all other projects are blocked). The links to the de.-pages are already there. Thanks in advance. I tried to ask any meta.-sysop yesterday in the wikipedia chat, but no one answered my query there. --AndreasPraefcke 21:20, 21 May 2005 (UTC)[reply]


www.p2l.info

There seems to be a spam bot attacking www.the-gdf.org - We are a wiki that contains the current specifications of the Gnutella Protocol. We've been attacked several times with spam that points to p2l.info Here are several diffs

http://www.the-gdf.org/wiki/index.php?title=Current_events&curid=1011&diff=0&oldid=514 http://www.the-gdf.org/wiki/index.php?title=Help:Contents&curid=1013&diff=503&oldid=502 http://www.the-gdf.org/wiki/index.php?title=Gnutella_Developers:Community_Portal&curid=982&diff=0&oldid=491 http://www.the-gdf.org/wiki/index.php?title=Gnutella_Developers:About&curid=1007&diff=485&oldid=479

This has been going on since about two weeks now, all these diffs are only from today. We found this Spam Blacklist extension, and we wanted to contribute by requesting p2l.info to be added to the BlackList.

The GDF 12:11, May 23 2005 (UTC) http://www.the-gdf.org/wiki/index.php?title=Current_events&curid=1011&diff=0&oldid=514

Thank you, added. silsor 16:29, May 23, 2005 (UTC)
Er, no, it looks like pl2.info was added, but not p2l.info...
p.s. This spammer is pretty egregious (diffs on a wiki I administer: 1, 2, 3) and posts from a wide variety of IP addresses. I've already put him in our local blacklist. --K
I fixed it, changed pl2 to p2l -- Tim Starling 05:36, 24 May 2005 (UTC)[reply]
Woop. silsor 15:57, May 24, 2005 (UTC)

p2l.info

This spam bot is currently attacking www.signpuddle.net - a wiki for written sign langauge. It only creates new pages, attack several times an hour, and uses many different IPs. I installed the SpamBlacklist, but it was still attacking. I added a personal list and that seems to have stopped it. This seriously needs to be added to the blacklist.

Sorry, there was a typo in the original addition. This should be blocked here now. silsor 15:42, May 26, 2005 (UTC)

azzacash.com

This spam bot is just like the p2l.info one - posts intensly from a wide variety of IP addresses advertizing prescription drug sites like buy-fioricet.1.azzacash.com.

http://www.uuism.net/uuwiki/index.php?title=UUWiki:Community_Portal&curid=738&diff=2979&oldid=2972 http://www.uuism.net/uuwiki/index.php?title=UUWiki:About&curid=728&diff=2980&oldid=2974 http://www.uuism.net/uuwiki/index.php?title=Current_events&curid=739&diff=2978&oldid=2973

Seconded - I'm pretty sure it IS the p2l people; that was the only one I'd ever been spammed by and as soon as I started blocking them I got the azzacash garbage instead.

http://www.freebsdwiki.net/index.php?title=Help:Contents&curid=882&diff=2795&oldid=2794&rcid=1353 http://www.freebsdwiki.net/index.php?title=Current_events&curid=1402&diff=2798&oldid=2793&rcid=1352

"azzacash" added to the blacklist. Thank you for the report. silsor 15:43, May 26, 2005 (UTC)

Almost certainly the p2l people. Besides the similar MO, some of the IP addresses were identical or in the same netblock. Besides blacklisting azzacash, I banned /16 blocks for those addresses with an expiry of 40000 hours. Sucks for any legitimate users on those blocks, but this is ridiculous. :-(

handy-cool.de/ 2-handys.de

Guerrilla Marketing/ Spamming by the owner of the already added domain "handycool\.de": ( http://de.wikipedia.org/w/index.php?title=Mobiltelefon&action=history )

They own at least the following domains, please add them all:

  • handycool.de (already added)
  • handy-cool.de
  • 1-handys.de
  • 2-handys.de
  • profi-handys.de
  • handy-fun.tk
  • handy-kaufhaus.tk

round-robin domain spamming

Within 6 hours of blacklisting azzacash, I had attacks from a bot blasting out repeated edits to "Current Events" for subdomains at all of the following: 

badazz\.org 
d\.la 
silk\.com 
prout\.be 
bluelinecomputers\.be 
blueline\.be 
kyuran\.be 
nux\.at 
have-more-fun\.net 
compblue\.com 
phre\.net 
is13\.de 
thamaster\.de 
ic5mp\.net 
user-mode-linux\.net 
debianbase\.de 
onlinepeople\.net 
opank\.com 
ezua\.com 
ns1\.name 
plorp\.com 
ygto\.com 
aus\.cc 
nazari\.org 
bounceme\.net 
bestdeals\.at 
ns01\.us 
z0rz\.com 
egi\.biz 
myserver\.org 
blrf\.net 
dnyp\.com 
trickip\.net 
soliday\.org 
byinter\.net 
a\.la 
zapto\.org 
findhere\.org 
servequake\.com 
fw\.nu 
rutan\.org 
ugly\.as 
dynu\.com 
informs\.com 
b33r\.net 
ddns\.ms 
epac\.to 
3-a\.net 
trickip\.org 
ruwe\.net 
2mydns\.com 
2myip\.com 
x24hr\.com 
pcanywhere\.net 
2mydns\.net 
portx\.net 
dcclan\.co\.uk 
pacehillel\.org 
rawcomm\.net 
softguy\.com 
al0ne\.info 
waw\.pl

This is a very active spambot. Examples: 

http://www.freebsdwiki.net/index.php?title=Help:Contents&oldid=2806
http://www.freebsdwiki.net/index.php?title=Help:Contents&oldid=2802
http://www.freebsdwiki.net/index.php?title=Help:Contents&oldid=2800

Sigh. I blacklisted all of the above domains on my own local copy; but this is getting really and truly ridiculous. I fear somebody may have to come up with a better anti-spammer AI for the wikis if this keeps up.

Awesome. Unfortunately many of those domains are top-level hosts that host many sites, including some legitimate ones. These appear to be small sites that open a frame to a search in UmaxSearch.com, who would seem to be the basic perpetrators of this spam. This is where this blacklist currently breaks down, so there's not a lot we can do about it. silsor 22:25, May 26, 2005 (UTC)
That is correct; a lot of them are - sorta like no-ip.com, which you guys are already blacklisting (and I approve of). I personally chose to blacklist the "lots of tiny little sites nobody bothers to get a real domain name for" subdomain type hosts that the Russian mafia types I seem to be having trouble with are using anyway, but I can understand not everybody would. Maybe sometime next month I'll get a chance to hack whitelisting into the php module so it's easier for other wiki admins to blacklist the hosts and still allow specific links. (Maybe alligators will fly, too, but who knows? =) --Freebsdwikinet 04:42, 27 May 2005 (UTC)[reply]

worldescape.com

Repeated adding of this URL in various languages, usually from 213.10.202.40. May also include the other domains of this spammer - romeescape.com, amsterdamescape.com, newyorkescape.net, and maybe even more. Ahoerstemeier 13:22, 29 Jun 2005 (UTC)

www.modz.de

Spam with different IPs on several pages including the german wikipedia main page and the german wikinews mainpage. I tried to talk friendly to a person affiliated in IRC, who announced that this won't stop, because the website likes to get more hits.

"Important" Examples: [2], [3], [4], ... --Avatar 21:35, 1 Jul 2005 (UTC)

consumeralertsystem.com

Not a usual spam, seems to be instead some sort of adware which causes the links to be inserted (with obvious HTML formatting instead of wiki formatting) when a page is edited.

Samples can be found at en:Special:Contributions/70.146.152.173. For instance:

--cesarb 8 July 2005 22:03 (UTC)

Also en:Special:Contributions/65.1.214.82 and [7] and en:Special:Contributions/68.21.9.142. Looks like it's not a single infected computer. --cesarb 20:14, 9 July 2005 (UTC)[reply]
Added, thanks. --cesarb 20:40, 9 July 2005 (UTC)[reply]

Whitelisting desired

For individual URLs which can't be unblocked because they conflict with a significant spammer. Eventually the software will allow specifying exceptions to the general block rules.

Sites in domain "spb.ru"

  • www.d-c.spb.ru - DESIGN and CONSTRUCTION journal

Municipal districts of the St-Petersburg (Russia) :

  • mo-13.spb.ru
  • narvski-okrug.spb.ru

--Kaganer 09:36, 13 Apr 2005 (UTC)

Sites in domain "spb.su"

  • niimm.spb.su — Mathematics & Mechanics Faculty of St. Petersburg State University

BACbKA 09:28, 14 Apr 2005 (UTC)

Sites in domain "msk.ru"

  • metro.msk.ru — Site about Moskow metro (subway) --Kaganer 15:22, 29 Apr 2005 (UTC)
  • echo.msk.ru - the site of radio station "Echo Moscow" Grue 16:57, 10 May 2005 (UTC)[reply]
  • rus-etrain.msk.ru Site about electric multiple unit trains Kneiphof 13:24, 16 May 2005 (UTC)[reply]
    • I wish to add my voice to the voice of Kneiphof. Currently the link to rus-etrain in the article ru:Электропоезд (electric train) is more useful then the article itself, so it is morally difficult ;) to remove it. However, it is impossible to edit the article without removing the link, so that the spam protection system effectively blocks the article from editing. ru:Участник:Begemotv2718
      • Remove the "http" part of the URL or put a space between it and the domain. silsor 22:28, Jun 4, 2005 (UTC)
  • www.kerc.msk.ru — Keldysh Research Center (English version: www.kerc.msk.ru/ipg/index_e.shtml) --RuPassenger 15:38, 9 Jun 2005 (UTC)

Sites in domain "no-ip.info"

Sites in domain "dynalias.net"

  • (www.)fried.dynalias.net — my personal web site; I'd like to link it on my Wikipedia profile page! I understand that a lot of spam comes from the dynalias.net domain, but if you get anything from fried.dynalias.net you'll know who it's from (not that I'd ever do that, of course). Dave Fried 21:03, 30 May 2005 (UTC)[reply]

Other talk

Please leave all other talk in this section.

What's the difference?

Requesting from de.wiki for on-going spamming, I made an edit and add an entry. I expected it would work soon, but I had an additional report, spamming continued. What was wrong on my edit? Or it is a feature? --Aphaia | WQ2翻訳中 | talk 01:43, 28 Jan 2005 (UTC)

Diff

As suggested by Jamesday on IRC, here is a selection of diff URLs of typical spams from the biggest spammer on the English Wiktionary since October. The spams come from various IP ranges, the content contains either Chinese or the same badly translated into English. The URLs in the spam also change and seem to be something like tinyurls: 

"211.90.129.176" 02:22, 5 Nov 2004 Hippietrail blocked  with an expiry time of 48 hours (quit spamvertising already) 
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Esperanto_index&diff=120125&oldid=120123
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Esperanto_index&diff=112487&oldid=112087

"218.17.80.112" 10:08, 15 Nov 2004 Paul G blocked  with an expiry time of 14 days (Persistent spamming) 
http://en.wiktionary.org/w/wiki.phtml?title=Qur%27an&diff=117271&oldid=117268
http://en.wiktionary.org/w/wiki.phtml?title=Help:Contents&diff=117242&oldid=117235

"218.18.12.28" 10:36, 16 Nov 2004 Hippietrail blocked  with an expiry time of 2 days (the spamvertiser returns) 
http://en.wiktionary.org/w/wiki.phtml?title=Help:Contents&diff=117645&oldid=117642
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Community_Portal&diff=117650&oldid=117637
: done to here ~~~~
"218.18.87.200" 11:39, 4 Nov 2004 Hippietrail blocked  with an expiry time of 24 hours (spamvertising again) 
http://en.wiktionary.org/w/wiki.phtml?title=Slovene&diff=114324&oldid=114321
http://en.wiktionary.org/w/wiki.phtml?title=Russian&diff=114063&oldid=113973

"219.133.112.138" 07:22, 5 Nov 2004 Hippietrail blocked  with an expiry time of 48 hours (repeat spamvertiser) 
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Dutch_index&diff=114587&oldid=114569

"221.196.11.2" 07:18, 20 Nov 2004 Eclecticology blocked  with an expiry time of 168 hours (vandalism) 
http://en.wiktionary.org/w/wiki.phtml?title=Exponere&diff=118987&oldid=118968
http://en.wiktionary.org/w/wiki.phtml?title=Devil&diff=118982&oldid=118966

"221.196.82.226" 07:02, 13 Nov 2004 Hippietrail blocked  with an expiry time of 96 hours (spamdork strikes again) 
http://en.wiktionary.org/w/wiki.phtml?title=Megalomania&diff=116818&oldid=116812
http://en.wiktionary.org/w/wiki.phtml?title=Wiktionary:Recentchanges&diff=116817&oldid=116811

"221.197.16.90" "221.197.18.150"13:04, 10 Dec 2004 Polyglot blocked  with an expiry time of 504 hours (vandalizing Wiktionary 3 days in a row) 
http://en.wiktionary.org/w/wiki.phtml?title=Blue&diff=116635&oldid=116565
http://en.wiktionary.org/w/wiki.phtml?title=Onomatopoetic&diff=115406&oldid=114914

"221.197.18.150"13:04, 10 Dec 2004 Polyglot blocked  with an expiry time of 504 hours (vandalizing Wiktionary 3 days in a row) 
http://en.wiktionary.org/w/wiki.phtml?title=Soror&diff=125963&oldid=125957
http://en.wiktionary.org/w/wiki.phtml?title=Talk:Transwiki:Chortle&diff=125381&oldid=125312

"221.197.19.225" 06:49, 26 Nov 2004 Hippietrail blocked  with an expiry time of 4 days (spamvertiser) 
http://en.wiktionary.org/w/wiki.phtml?title=Mi&diff=124180&oldid=124103
http://en.wiktionary.org/w/wiki.phtml?title=Basketbrawl&diff=120998&oldid=120985

"60.25.120.218" 13:48, 11 Oct 2004 Hippietrail blocked  with an expiry time of 24 hours (continuing spamvertising) 
http://en.wiktionary.org/w/wiki.phtml?title=Lead&diff=108477&oldid=108407
http://en.wiktionary.org/w/wiki.phtml?title=Phoneme&diff=108562&oldid=108346

"60.25.122.177" 08:25, 17 Nov 2004 Hippietrail blocked  with an expiry time of 3 days (spamvertiser) 
http://en.wiktionary.org/w/wiki.phtml?title=Nu&diff=117897&oldid=117808
http://en.wiktionary.org/w/wiki.phtml?title=User:Gangleri/tests&diff=117898&oldid=117805

"61.145.136.171" 06:39, 11 Oct 2004 Polyglot blocked  with an expiry time of 168 hours (repeated vandalism in several pages over the last 24 hours) 
http://en.wiktionary.org/w/wiki.phtml?title=User:D%C5%82ugosz&diff=108377&oldid=108351
http://en.wiktionary.org/w/wiki.phtml?title=Help:Contents&diff=108241&oldid=10817

— Hippietrail 13:50, 11 Dec 2004 (UTC)

Spam protection filter bugs

(moved from User talk:Angela)

I got the above message for the first time today, more than once. Many of the sites (because of which I got the above message) are not listed on m:Spam blacklist. Some users link to google on votes for deletion page and so, I cannot edit even those pages. Utcursch 13:37, 20 Dec 2004 (UTC)

I have the same problem, on en:Viktor Yushchenko page. When I try to save the page, I get a message that biz.yahoo.co.uk and reuters.com are on m:Spam blacklist, although none of them is listed there (and should not be listed, as those are frequently linked news sites). 195.13.132.24 13:45, 20 Dec 2004 (UTC)
I had the same problem. I think it was probably related to the server going read-only this morning. 64.222.254.30 06:04, 21 Dec 2004 (UTC)

It was an over-broad spam filter rule. Unrelated to any server issues - I simply got a rule significantly wrong. Jamesday 21:33, 10 Jan 2005 (UTC)

I've never done this

A user (bryan Derksen) left a note on my my en talk page regarding the website claudiabeni-fansite.6x.to, which is linked to on wikipedia:en:Claudia Beni. It seems like a perfectly appropriate website, but its presence was keeping him from adding a category. The website doesn't appear to be listed on the spam filter page, though, so I don't know how to fix this. Can someone help? TUF-KAT 14:44, 27 Feb 2005 (UTC)

Nevermind, I got it. TUF-KAT 18:02, 27 Feb 2005 (UTC)

Redirect spam

Not sure if this can be part of the spamfilter, but a particularily nasty vandal redirected pages to some cache> the text he inserted was #REDIRECT[[cache:http://www.oralse.cx/]]. See the Contributions. Of ocurse, better would be if outside redirects are disabled in general. -- Chris 73 11:56, 18 Feb 2005 (UTC)

Brion disabled this, shouldn't be a problem anymore. silsor 12:51, Feb 18, 2005 (UTC)

Multi-wiki collaborative blacklist

There's a very good multi-wiki collaborative blacklist at http://www.emacswiki.org/cw/BannedContent . It's automagically collated from a number of different sources. Some sort of cooperation would probably be helpful for Wikimedia and other wikis. --Evan 22:48, 18 Mar 2005 (UTC)

Chongqed.org also has a blacklist. In this case it is built up largely from their spam submission system. http://blacklist.chongqed.org/
Submissions are checked, so it should be reliable list of regular expressions for spam all over wikidom. By submitting details of a spammer here, you also add the spammer to their database, which means you can 'chongq' them (steal search engine rankings from them by linking to the database) -- Halz - 25th Apr 2005

Can article titles be blocked by Regexp?

In german Wikipedia a troll tries to recreate a deleted article and uses Unicode tricks (substituting cyrillic letters of same appearance, special dots or even the simple large I vs small el trick) to create it under a large number of different names. The original name was de:K.D.St.V. Carolus Magnus, a recent attempt was de:K․D․Ѕt․V․ CarоIuѕ Μaɡnuѕ, more attempts usually visible at the delete log [8].

As there are some latin letters which cannot be faked, I think it would be possible to find a regexp for blocking, if there is a software feature to block article titles by regexp.

Pjacobi 21:00, 2005 Mar 27 (UTC)

The spam blacklist deals only with external links. silsor 21:18, Mar 27, 2005 (UTC)

Unable to revert vandalism

Hi, not sure if this is the rigth place, but:
en:Ambigram has been vandalised by replasing all links with nonsense, and trying to revert it sends me to the spam protection filter because one of the links is a numbers only link ( 01101001.com ). The page is a relevant link for the article. en:User:Demo 07:30, 19 May 2005 (UTC)[reply]

Edits delayed in ?action=raw

So, I'm using the load_lists script in SpamBlacklist, and it appears that the URL it fetches --- http://meta.wikimedia.org/wiki/Spam_blacklist?action=raw --- does not track the actual contents of the page. For example, azzacash was added yesterday, and is clearly visible on the Spam blacklist page, but the ?action=raw URL doesn't pick it up. I'm not sure where to report this --- it looks like a MediaWiki bug to me. -K

It was only added 4 hours ago, but this still shouldn't happen. You can file a bug at http://bugzilla.wikimedia.org/. silsor 18:49, May 26, 2005 (UTC)
I get a "Forbidden - Raw pages must be accessed through the primary script entry point." error when loading that URL, but this URL seems to work instead http://meta.wikimedia.org/w/index.php?title=Spam_blacklist&action=raw --Travisd666 16:28, 13 July 2005 (UTC)[reply]

Stanley Unwin

Does anyone know why stanleyunwin.com is being blocked? It used to be in the Stanley Unwin article but is being filtered despite not appearing in this list and not looking like a spam link. Angela 00:03, 29 Apr 2005 (UTC)

It was added recently by Yann, in what may have been an overzealous filtering. The domain "win.com" was filtering "stanleyunwin.com". Removed. silsor 03:50, Apr 29, 2005 (UTC)
Is it supposed to work like this? fiji.com in the blacklist is also blocking alliancefiji.com. Angela 13:30, 1 May 2005 (UTC)[reply]
Unfortunately yes. This can occasionally be prevented, though, by using filters like \.fiji\.com. silsor 16:34, May 1, 2005 (UTC)

Janet Jackson

Hi,

Does anyone know why is Janet Jackson's official site www.janet-jackson.com on the list? hu:user:Alensha

It's really "janet-jackson", and it's probably a holdover from porn spam that included that text in the domain name. It's been in the blacklist since the beginning so there shouldn't be too much harm in removing it. silsor 23:02, May 19, 2005 (UTC)

IP list from Anarchopedia

95% of this IPs spammed Anarchopedia today. If you need more details, tell me what do I need to ask MySQL for deleted pages? --Millosh 19:28, 26 May 2005 (UTC)[reply]

24.239.248.21 61.185.19.77 61.205.205.42 62.90.251.129 62.139.105.29 63.145.115.131 66.47.217.98 66.160.69.101 66.178.21.203 69.50.184.211 69.50.187.93 81.115.31.217 81.144.146.194 82.129.167.165 82.129.167.171 82.194.62.22 148.235.92.153 148.244.150.57 161.200.255.161 193.188.105.22 195.175.37.71 200.162.244.20 200.164.88.146 200.165.76.250 200.247.92.130 201.9.127.141 202.47.247.130 202.154.157.205 203.64.76.228 203.144.143.2 203.177.60.237 210.68.141.70 212.92.8.103 213.175.169.2 217.29.240.36 217.196.166.105 219.240.37.28

This spam blacklist blocks sites from being added by any user, not specific IPs from editing articles. silsor 19:52, May 26, 2005 (UTC)
Email blacklists block sending email by any user. User who thinks that (s)he is not a (wiki) spammer should send an email. Note that this list is generated today (an the list still grows)! I'll try to make statistics about operating systems of that IPs tomorrow, but I think that we would get high percentage of Unix-like OSs. (The only other possibility is that IPs belong to infected Windows machines, but I don't think so...) --Millosh 20:21, 26 May 2005 (UTC)[reply]
This spam blacklist blocks sites from being added by any user, not specific IPs from editing articles. silsor 19:52, May 26, 2005 (UTC)

request 16 06 2005

An editor is asking that http://havardDOTno-ipDOTinfo be removed from the list so that he can add it to his newly created user page. He considers the site legitimate. Does anyone see an objection to this removal ?

THanks for the answer :-)

Anthere 18:00, 16 Jun 2005 (UTC)

Removed, we'll see what happens. This is a second-level-domain site that has been used by some spammers in the past. silsor 19:38, Jun 16, 2005 (UTC)

.homelinux.com

I don't see why all homelinux.com DynDNS urls have to be blocked. The ones I'd like to add are: http://jedilinux-ukDOThomelinuxDOTcom and http://lakerdonaldDOThomelinuxDOTcom Both of them for the Jedi Linux page. Thanks.

blacklisted spam can be posted from DIV tags

Sadly, the drug spammers have found a loophole. See below:

I'll spare you the bajillion actual entries in the spam - they're all the ones I listed above in the comment titled "round-robin domain spamming." They're ALL blacklisted, but unfortunately they can be posted successfully when wrapped in a DIV tag as shown above. --Freebsdwikinet 03:15, 19 Jun 2005 (UTC)

I tested this on enwiki using the exact HTML fragment above with a domain from our blacklist, but it was successfully blocked by the spam filter. Can you demonstrate with, say, predictive-dialers.org on en:User:Silsor/sandbox? silsor 06:29, Jun 19, 2005 (UTC)

sex spam on nah:

+sj | Translate the Quarto |+ 01:56, 14 July 2005 (UTC)[reply]

Retrieved from "https://meta.wikimedia.org/w/index.php?title=Talk:Spam_blacklist&oldid=177029"